CVE-2005-1252

Directory traversal vulnerability in the Web Calendaring server in Ipswitch Imail 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote attackers to read arbitrary files via ".." dot dot backslash sequences in the query string argument in a GET request to a non-existent .jsp...

CVE-2005-1255

Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite ICS, and other versions before IMail Server 8.2 Hotfix 2, allow remote attackers to execute arbitrary code via a LOGIN command with 1 a long username argument or 2 a long username...

CVE-2005-1256

Stack-based buffer overflow in the IMAP daemon IMAPD32.EXE in IMail 8.13 in Ipswitch Collaboration Suite ICS, and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to execute arbitrary code via a STATUS command with a long mailbox name...

CVE-2005-1254

The CVE-2005-1254 issue affects Ipswitch IMail IMAP server (versions 8.12 and 8.13; older versions before IMail Server 8.2 Hotfix 2 are also mentioned). It is caused by a stack-based buffer overflow when processing long arguments to the SELECT command (approximately 260 bytes), leading to a remot...

CVE-2005-1256

A stack-based buffer overflow vulnerability in Ipswitch IMail’s IMAP STATUS handling allows remote authentication-enabled attackers to execute arbitrary code. A long mailbox name in the STATUS command can overflow IMAPD32.EXE (IMail 8.13 in Ipswitch Collaboration Suite and earlier versions) and m...

Immunity Canvas: ZEN

Name| zen ---|--- CVE| CVE-2005-1255 Exploit Pack| CANVAS Description| imailimap Notes| CVE Name: CVE-2005-1255 VENDOR: IPSwitch VersionsAffected: IMail 8.13 Repeatability: This is a one shot exploit. CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1255 CVSS: 10.0...

CVE-2005-1255

CVE-2005-1255 refers to multiple stack-based buffer overflows in the IMail IMAP server (Ipswitch Collaboration Suite and related IMail Server versions). The vulnerability allows a remote attacker to cause arbitrary code execution by sending a crafted LOGIN command with an overly long username arg...

CVE-2005-1252

CVE-2005-1252 affects Ipswitch IMail Web Calendaring server. A directory traversal flaw in handling requests for nonexistent .jsp resources lets an unauthenticated remote attacker read arbitrary files via crafted GET requests (e.g., ..\ sequences). Affects IMail 8.13 and earlier versions up to IM...

CVE-2005-1252

Directory traversal vulnerability in the Web Calendaring server in Ipswitch Imail 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote attackers to read arbitrary files via ".." dot dot backslash sequences in the query string argument in a GET request to a non-existent .jsp...

CVE-2005-1254

Stack-based buffer overflow in the IMAP server for Ipswitch IMail 8.12 and 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to cause a denial of service crash via a SELECT command with a large argument...

CVE-2005-1255

Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite ICS, and other versions before IMail Server 8.2 Hotfix 2, allow remote attackers to execute arbitrary code via a LOGIN command with 1 a long username argument or 2 a long username...

CVE-2005-1254: Undefined Security Weakness

Stack-based buffer overflow in the IMAP server for Ipswitch IMail 8.12 and 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to cause a denial of service crash via a SELECT command with a large argument...

Immunity Canvas: IMAIL_IMAP

Name| imailimap ---|--- CVE| CVE-2005-1255 Exploit Pack| CANVAS Description| IMAIL Imap Notes| CVE Name: CVE-2005-1255 VENDOR: IPSwitch URL: http://www.idefense.com/application/poi/display?id=243&type=vulnerabilities VersionsAffected: IMail 8.13 up to 8.2p1 Repeatability: This is a one shot...

iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP LSUB DoS Vulnerability

Ipswitch IMail IMAP LSUB DoS Vulnerability iDEFENSE Security Advisory 05.24.05 www.idefense.com/application/poi/display?id=245&type=vulnerabilities May 24, 2005 I. BACKGROUND Ipswitch Collaboration Suite ICS is a comprehensive communication and collaboration solution for Microsoft Windows with a...

Multiple IPSwitch IMail vulnerabilitiles

Multiple buffer overflows, directory traversals, DoS...

CVE-2005-1255: Undefined Security Weakness

Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite ICS, and other versions before IMail Server 8.2 Hotfix 2, allow remote attackers to execute arbitrary code via a LOGIN command with 1 a long username argument or 2 a long username...

CVE-2005-1256: Undefined Security Weakness

Stack-based buffer overflow in the IMAP daemon IMAPD32.EXE in IMail 8.13 in Ipswitch Collaboration Suite ICS, and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to execute arbitrary code via a STATUS command with a long mailbox name...

iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP SELECT Command DoS Vulnerability

Ipswitch IMail IMAP SELECT Command DoS Vulnerability iDEFENSE Security Advisory 05.24.05 www.idefense.com/application/poi/display?id=241&type=vulnerabilities May 24, 2005 I. BACKGROUND Ipswitch IMail server is a Windows based messaging solution with a customer base of over 53 million users. More...

iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP STATUS Remote Buffer Overflow Vulnerability

Ipswitch IMail IMAP STATUS Remote Buffer Overflow Vulnerability iDEFENSE Security Advisory 05.24.05 www.idefense.com/application/poi/display?id=244&type=vulnerabilities May 24, 2005 I. BACKGROUND Ipswitch Collaboration Suite ICS is a comprehensive communication and collaboration solution for...

CVE-2005-1252: Undefined Security Weakness

Directory traversal vulnerability in the Web Calendaring server in Ipswitch Imail 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote attackers to read arbitrary files via ".." dot dot backslash sequences in the query string argument in a GET request to a non-existent .jsp...